Static task
static1
Behavioral task
behavioral1
Sample
919eeefa009d6b6790e148d1c1b91caae9c16502b54243c05909c8170401bc66.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
919eeefa009d6b6790e148d1c1b91caae9c16502b54243c05909c8170401bc66.exe
Resource
win10v2004-20220901-en
General
-
Target
919eeefa009d6b6790e148d1c1b91caae9c16502b54243c05909c8170401bc66
-
Size
115KB
-
MD5
3d8360e1eef4e36b49bd0cd0063af135
-
SHA1
0b6b019c7af6c81160f588a9d58693057fc34f87
-
SHA256
919eeefa009d6b6790e148d1c1b91caae9c16502b54243c05909c8170401bc66
-
SHA512
5634de555fe9fe6d7790eddd74c5dcd864ddb8c67d131bdf60f9f04d48884756087ce42997866e050025d9b0537bd417f630d8778ab25269a2f8b8d8f1f8263a
-
SSDEEP
3072:xppFc2dV45YK+wecEoMoQJrXYuRo6PtL29pmxxAv:xpgJ5v+wREoJQuatL2f
Malware Config
Signatures
Files
-
919eeefa009d6b6790e148d1c1b91caae9c16502b54243c05909c8170401bc66.exe windows x86
c327c051b1c3a5f211e0c4af01cbe3d0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
CommConfigDialogA
CopyFileA
CreateFiber
ExitProcess
FindAtomA
FreeLibrary
GetACP
GetAtomNameA
GetCPInfoExA
GetCommandLineA
GetExitCodeProcess
GetExitCodeThread
GetFileTime
GetHandleInformation
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessTimes
GetProfileSectionA
GetShortPathNameA
GetStartupInfoA
GetTempPathA
GlobalAddAtomA
GlobalFindAtomA
GlobalFix
GlobalReAlloc
IsBadHugeReadPtr
IsSystemResumeAutomatic
LoadLibraryExA
LocalFlags
LocalSize
OpenEventA
QueryDosDeviceA
QueueUserAPC
ReadFile
ReleaseSemaphore
SearchPathA
SetUnhandledExceptionFilter
Sleep
UnlockFile
WaitForSingleObject
WriteFile
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
fputc
free
malloc
memset
rand
signal
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 106KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 368B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE